Privacy Policy

This Privacy Policy explains which personal data is processed when you visit this website or request a CredentialChaser pilot spot.

1. Controller

2. Providing this website

When you access the website, the server processes technically necessary connection data, particularly your IP address, the time of access, the requested address, the amount of data transferred, and browser and operating-system information. This is necessary to deliver the website securely and reliably. The legal basis is Article 6(1)(f) GDPR.

The CredentialChaser application itself does not create permanent access logs. Depending on the hosting provider selected for publication, technical server logs may be processed. Details of that provider, processing location and retention period must be added here before publication.

3. Pilot request and email confirmation

When you request a pilot spot, we store your email address, selected language, request time, confirmation status, confirmation timestamps and the version of the consent information shown with the form in a SQLite database. Your address remains pending until you confirm it using the link sent to you.

We use this information only to verify your request, prevent duplicate entries, handle potential pilot participation and contact you about the CredentialChaser pilot. The legal basis is Article 6(1)(b) GDPR where your request is directed toward a potential contract. In other cases, processing is based on our legitimate interest in handling genuine enquiries under Article 6(1)(f) GDPR.

The confirmation link expires after 48 hours. Unconfirmed requests are removed no later than seven days after expiration. Confirmed requests are deleted when they are no longer needed for the pilot process and no statutory retention obligation applies. You may withdraw your request at any time by email.

4. Transactional email through Brevo

We use Brevo to send the confirmation email. For this purpose, your email address and technical delivery information are transmitted to Brevo and processed on our behalf. Brevo states that the servers used to process and store its databases are located within the European Union. We disable contact-level tracking pixels for these confirmation emails.

Provider information and further details are available at Brevo's Privacy Policy. The legal basis follows the purpose described in Section 3. We will enter into the required data-processing agreement with the provider before production use.

5. Contact by email

If you contact us by email, we process your message, email address and any other information you voluntarily provide in order to respond. Depending on the subject of your message, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR.

6. Cookies, analytics and external content

This website does not use cookies or external analytics and tracking services. For a basic measurement of reach, the application stores only aggregate counts of views and visits to the German and English landing pages per calendar day. If the hosting infrastructure provides a two-letter country code, visits are also stored as aggregate daily country totals. To group multiple views into one visit, the network address and browser identifier are combined with a secret value generated on every server start to create a derived identifier. This identifier remains only in memory, is removed after 30 minutes of inactivity and is not stored in the database. Neither IP addresses nor individual country assignments are stored. No permanent visitor profiles are created, and the stored daily totals cannot be traced to individuals. The website does not load fonts or other page content from external providers. Bootstrap, styles and images are served locally.

7. Recipients

Personal data is processed only by the service providers required to operate the website and deliver the confirmation email, acting under the applicable data-protection agreements. We do not sell your data.

8. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may also object to processing based on Article 6(1)(f) GDPR.

You also have the right to lodge a complaint with a data-protection supervisory authority, particularly the authority at your habitual residence, place of work or the location of the alleged infringement.

9. Data security

We take appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access. When published, the website will be provided over an encrypted HTTPS connection.

Last updated: 18 August 2026